Set up fraud prevention rules

Memberful requires a Stripe account to process credit card payments. Stripe allows you to write fraud prevention rules to automatically review, block, or allow payments that match the criteria you’ve defined. On top of Stripe’s default settings, there are other rules that we suggest you include to better protect your business against fraudulent activity (like credit card testing or credential stuffing). We’ll cover those rules in this doc.

In this help doc:

• Set up Stripe Rules for a new business with no members.
• Set up Stripe Rules for an existing business with paying members.

Set up Stripe Rules for a new business

If you’re just launching your business and have no paying members yet, navigate to Payments → Rules in Stripe, and:

1. Enable the following 3D Secure rules:

   1. Request 3DS if 3D Secure is required for card.
   2. Request 3DS if 3D Secure is recommended for card.

2. Set up the following radar rules:

   1. Block if CVC verification fails.
   2. Block if postal code fails.

3. If you offer a free trial, enable this rule: Use Radar on payment methods saved for future use. It costs 5c per attempt but is probably the best option if you want to curtail free trial abuse and keep the trial free. Alternatively, you could switch to a paid trial.

If you need help setting up Rules, contact Stripe support.

Set up Stripe Rules for an existing business

If you already have an established business with paying customers, navigate to Payments → Rules in Stripe, and:

1. Enable the following 3D Secure rules:

   1. Request 3DS if 3D Secure is required for card.
   2. Request 3DS if 3D Secure is recommended for card.

2. Set up the following radar rules:

   1. Block if :cvc_check: in ('fail', 'unavailable', 'unchecked') and :authorized_charges_per_customer_all_time: = 0
   2. Block if :address_zip_check: in ('fail', 'unavailable', 'unchecked') and :authorized_charges_per_customer_all_time: = 0

3. If you offer a free trial, enable this rule: Use Radar on payment methods saved for future use. It costs 5c per attempt but is probably the best option if you want to curtail free trial abuse and keep the trial free. Alternatively, you could switch to a paid trial.

If you need help setting up Rules, contact Stripe support.

Related help docs:

• What happens with failed payments?
• How do I switch Stripe accounts?
• How do I select my currency?